Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: DRo5/rvhFGUuJtINXACQTiLhMU2YEXvhemnPU3L0M+k=
Subject key identifier: 8F:77:E9:C4:BA:2C:53:99:17:90:A6:D8:DE:03:35:85:CE:68:2D:04
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 0197481E2204584DD04E3BBCECA7AC67501E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 09E2
Signing time: Sat 07 Jun 2025 02:00:23 +0000
Manifest this update: Sat 07 Jun 2025 02:00:23 +0000
Manifest next update: Sun 08 Jun 2025 02:00:23 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: JGgFBF+B2ADgWqIvAEc6VcAKHT1s5sHknVw9wQvKLkM=)
2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:22:04:58:4d:d0:4e:3b:bc:ec:a7:ac:67:50:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Jun 7 02:00:23 2025 GMT
Not After : Jun 8 02:00:23 2025 GMT
Subject: CN=8f77e9c4ba2c53991790a6d8de033585ce682d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9c:1d:00:45:c1:a9:00:f1:3a:63:6a:3d:ef:
3e:c2:be:ce:2a:35:94:91:4d:fb:e5:cf:90:18:5f:
76:80:53:85:e4:f5:6d:b2:81:7f:a5:eb:c7:5b:23:
4e:58:c0:da:ba:a1:70:88:73:e6:e3:59:36:3b:52:
f4:a7:9d:81:38:21:3f:75:e0:e0:17:15:4a:08:8a:
ba:93:ce:a2:96:7a:4b:05:82:a2:39:56:dd:f6:cf:
bb:7b:41:8a:bf:65:38:16:eb:57:fc:97:64:39:8d:
c2:50:a4:aa:e2:59:b0:df:a1:c9:7b:d7:10:f6:a0:
05:cf:61:f6:4c:7b:2d:40:95:d0:54:fe:dd:89:a5:
65:82:e5:09:89:67:b3:81:7f:23:b1:e4:ab:f7:c1:
f5:82:1d:95:a5:f1:6c:de:a0:49:6b:21:6d:27:ec:
65:14:4d:ee:c9:a9:54:73:8e:28:f6:a3:79:95:81:
f1:13:dc:7a:f4:72:6e:81:aa:17:4b:5a:74:2a:c4:
42:a4:64:e2:c0:4f:c6:ee:0c:07:08:f7:da:2f:7b:
52:98:ab:0e:93:38:a9:9d:56:61:f7:f1:ae:84:30:
81:40:83:f3:5f:80:99:53:44:17:04:6a:83:41:95:
d0:06:e0:bb:86:06:fd:aa:37:88:d8:8a:c2:82:be:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:E9:C4:BA:2C:53:99:17:90:A6:D8:DE:03:35:85:CE:68:2D:04
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b4:1a:05:8d:40:25:bd:ef:5c:f6:b4:2a:d1:10:fb:b7:4f:
b0:74:82:3a:41:a1:3b:b2:98:24:66:6d:e0:63:ec:9a:3d:4e:
4d:78:c4:23:f0:94:a4:7c:fc:e5:88:c6:7b:8a:8a:6b:1c:a2:
b3:19:22:89:28:a1:64:6b:06:21:74:2d:3f:9e:b5:56:ca:93:
50:8e:8f:b3:a2:d7:0d:44:ff:ee:32:59:86:4f:57:7e:34:70:
ec:30:35:0a:77:38:ec:9c:b8:f7:df:43:51:79:6c:ba:97:23:
1c:55:ed:27:5b:90:d6:28:e2:11:3c:58:9b:ae:d2:43:45:4a:
a3:ec:5f:9e:26:ce:91:27:ff:17:c7:5e:2c:b3:49:ae:cb:fa:
54:e2:7f:f3:1a:f6:c9:f1:5c:59:3b:55:53:1f:91:4f:4a:c9:
4f:c7:ac:f0:5f:28:33:ca:9d:ba:77:66:d9:72:5f:e6:5f:ac:
71:22:96:2d:0a:8c:8c:97:b5:1b:e4:6d:8d:d2:07:75:d5:31:
85:71:b1:41:de:01:c5:72:a7:a8:d9:bb:aa:03:1d:52:f0:42:
ea:4d:99:3d:a5:31:14:da:3f:64:13:ba:7f:e2:86:de:4c:3e:
98:b6:bb:82:0c:a6:36:ba:5d:98:d3:db:96:d4:ba:a1:ed:49:
76:c3:c6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client